Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3139302e3138302e3132382e302f32302d3234203d3e203532393330.roa
File:                     3139302e3138302e3132382e302f32302d3234203d3e203532393330.roa (raw, json)
Hash identifier:          kRh2KCA/dKhYPozT/ldGoPZHlnDxmgClZoweQCvCOSc=
Subject key identifier:   49:DC:5C:3E:3F:59:27:19:13:AF:F6:59:AB:56:97:87:95:50:C8:5E
Certificate issuer:       /CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
Certificate serial:       38DCF64431733EBE6E37BDBCAB4E95A3E81BF0DF
Authority key identifier: AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3139302e3138302e3132382e302f32302d3234203d3e203532393330.roa
Signing time:             Wed 10 Apr 2024 15:51:22 +0000
ROA not before:           Wed 10 Apr 2024 15:46:22 +0000
ROA not after:            Wed 09 Apr 2025 15:51:22 +0000
asID:                     52930
IP address blocks:        190.180.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:dc:f6:44:31:73:3e:be:6e:37:bd:bc:ab:4e:95:a3:e8:1b:f0:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
        Validity
            Not Before: Apr 10 15:46:22 2024 GMT
            Not After : Apr  9 15:51:22 2025 GMT
        Subject: CN=49DC5C3E3F59271913AFF659AB5697879550C85E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:88:f9:a1:be:7e:bd:ba:62:63:de:54:13:cb:
                    22:7f:c3:fe:f2:d4:e3:09:bd:66:60:13:91:7d:79:
                    a6:f9:70:9c:bd:ed:ca:8c:25:52:95:f5:16:3a:c2:
                    99:57:99:58:e2:32:c8:df:1f:cb:94:70:66:3c:95:
                    4c:93:7e:ad:c7:75:d6:12:b5:f4:1c:f7:0d:0b:c8:
                    0b:84:69:87:03:46:bf:84:63:ce:b0:af:d8:31:94:
                    ba:79:7c:41:8e:a1:74:e0:b8:8f:b8:b4:d1:62:93:
                    85:e7:17:fc:9c:75:7c:fd:e2:38:9e:47:71:8c:3e:
                    21:5a:35:b1:fe:b6:29:1c:f9:c4:e0:84:e5:59:b9:
                    be:bc:48:86:a7:23:e2:82:34:d6:16:1b:89:a1:f8:
                    89:0c:12:e1:3b:49:6e:67:9f:33:42:23:9b:e6:d3:
                    87:81:fa:7e:bc:f4:62:21:1d:5b:6c:2e:38:70:e3:
                    5b:d8:c4:5c:02:54:32:e8:5d:96:34:d2:2c:2d:78:
                    80:53:76:df:62:fd:43:eb:b2:77:7b:8f:2a:8d:51:
                    52:4d:a1:10:ee:71:27:7c:e2:09:f6:b7:f6:16:fd:
                    5c:e7:fd:bc:aa:2b:07:1e:e9:fe:c4:00:b4:f5:12:
                    6f:29:be:c2:2e:24:4f:04:ae:ca:4d:6e:97:dd:b1:
                    91:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DC:5C:3E:3F:59:27:19:13:AF:F6:59:AB:56:97:87:95:50:C8:5E
            X509v3 Authority Key Identifier:
                keyid:AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/AE58493D362ABCD98C2752F6BC5F4335A17F721D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/3139302e3138302e3132382e302f32302d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:39:de:20:5b:49:1d:4a:e0:17:9c:a1:9c:57:01:8f:89:31:
         b4:ad:b2:68:9a:e5:89:2f:74:ff:3a:d0:6e:1b:d6:62:b9:0d:
         ab:86:53:c2:bb:69:77:e4:8c:22:19:77:ae:c2:21:f9:13:a7:
         fe:69:ad:47:3f:30:58:4e:2a:db:ab:9c:66:74:ca:b6:4c:30:
         43:cd:18:62:cd:de:72:45:fa:d0:eb:87:52:01:77:b0:f8:e5:
         cc:fb:23:9a:23:a2:f3:2b:82:05:c5:74:57:42:c3:ef:83:35:
         c6:7d:42:c4:93:5e:8e:47:d2:47:56:12:f9:a4:22:7d:ac:bf:
         08:01:e5:c9:4f:32:25:8b:73:c0:6d:e6:c1:59:da:0f:9f:ad:
         e9:de:5c:cf:c5:76:bc:83:ee:92:00:1f:40:1d:15:ce:7f:e7:
         d8:a3:22:77:7f:6c:06:f5:ea:a6:8a:4d:78:1b:59:cc:98:24:
         4e:58:d0:66:63:e3:3e:8f:b1:9c:4f:e6:47:74:aa:6c:40:ae:
         1b:06:5b:cf:4f:40:83:bf:ed:8a:e1:56:31:c4:f9:10:13:42:
         b6:2c:53:45:ed:60:62:09:7f:82:ca:cd:29:aa:8a:33:e7:43:
         1e:28:cc:bb:ba:13:4d:fe:28:8e:fb:4e:cc:51:f1:ac:80:e2:
         b8:9d:f0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org